Economic Calendar Fetcher

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it claims: use an FMP API key to fetch economic calendar data and format the results.

This looks safe for its stated purpose. Before installing, be aware that it needs an FMP API key and sends requests to Financial Modeling Prep; use a dedicated API key and only save output files to locations you intend.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

You may need to provide an FMP API key, which will be used to make requests to Financial Modeling Prep.

Why it was flagged

The script requires an FMP API key and sends it to the documented FMP endpoint as a request parameter. This credential use is expected for the stated integration, but it is still account/API access users should notice.

Skill content

api_key = args.api_key or get_api_key()
...
params = {
    'from': from_date,
    'to': to_date,
    'apikey': api_key
}

Recommendation

Use a dedicated FMP API key with the minimum subscription/access needed, and avoid sharing unrelated credentials.

Info

#ASI02: Tool Misuse and Exploitation

What this means

The skill contacts the external FMP service and can save a report file if an output path is provided.

Why it was flagged

The helper performs a network request and can write results to a user-specified output path. Both behaviors are disclosed and aligned with fetching and saving an economic calendar report.

Skill content

with urllib.request.urlopen(url) as response:
...
if args.output:
    with open(args.output, 'w', encoding='utf-8') as f:
        f.write(output)

Recommendation

Run it only for intended date ranges and choose output paths carefully to avoid overwriting files.